Putting this into practice
Winners Consulting helps organizations turn this concept into workable policies, processes and audit readiness.
Step 1 of 3
You looked up “Concentration Risk”. Which situation is closest to yours?
Common situations behind “Concentration Risk” and the first step
- An EU financial customer asks its ICT service providers to support DORA：Prepare evidence for contract terms, incident reporting and resilience testing support
- You are a financial entity operating in the EU：Set up an ICT risk management framework and third-party risk management
- You need an advisor who knows digital operational resilience in finance：Check that the advisor reuses ISO 22301 and 27001 evidence for DORA
Winners Consulting provides DORA compliance consulting. Vice-president and director-level consultants lead the work end to end with no outsourcing, and one set of evidence answers several laws and customer requirements.
Before choosing a consultant or budgeting: decision guides
Use these guides as a checklist when comparing consultants and estimating budget and timeline.
- How to choose an ISO 22301 business continuity consultant in Taiwan: seven criteriaWhen choosing an ISO 22301 consultant, check whether the business impact analysis is solid, whether recovery objectives have been verified, and whether exercises actually expose problems.
- Implementing ISO 22301 business continuity management: how to plan budget and timelineISO 22301 can be certified by a certification body. The budget depends on the number of critical activities and sites in scope, the depth of the business impact analysis, and the current state of backup and disaster-recovery technology.
Need help with compliance implementation?
Request Free Assessment